271 	u32 st0[4], st1[4];  in aesti_encrypt()  local
285 		st1[0] = mix_columns(subshift(st0, 0)) ^ rkp[0];  in aesti_encrypt()
286 		st1[1] = mix_columns(subshift(st0, 1)) ^ rkp[1];  in aesti_encrypt()
287 		st1[2] = mix_columns(subshift(st0, 2)) ^ rkp[2];  in aesti_encrypt()
288 		st1[3] = mix_columns(subshift(st0, 3)) ^ rkp[3];  in aesti_encrypt()
293 		st0[0] = mix_columns(subshift(st1, 0)) ^ rkp[4];  in aesti_encrypt()
294 		st0[1] = mix_columns(subshift(st1, 1)) ^ rkp[5];  in aesti_encrypt()
295 		st0[2] = mix_columns(subshift(st1, 2)) ^ rkp[6];  in aesti_encrypt()
296 		st0[3] = mix_columns(subshift(st1, 3)) ^ rkp[7];  in aesti_encrypt()
299 	put_unaligned_le32(subshift(st1, 0) ^ rkp[4], out);  in aesti_encrypt()
300 	put_unaligned_le32(subshift(st1, 1) ^ rkp[5], out + 4);  in aesti_encrypt()
301 	put_unaligned_le32(subshift(st1, 2) ^ rkp[6], out + 8);  in aesti_encrypt()
302 	put_unaligned_le32(subshift(st1, 3) ^ rkp[7], out + 12);  in aesti_encrypt()
310 	u32 st0[4], st1[4];  in aesti_decrypt()  local
324 		st1[0] = inv_mix_columns(inv_subshift(st0, 0)) ^ rkp[0];  in aesti_decrypt()
325 		st1[1] = inv_mix_columns(inv_subshift(st0, 1)) ^ rkp[1];  in aesti_decrypt()
326 		st1[2] = inv_mix_columns(inv_subshift(st0, 2)) ^ rkp[2];  in aesti_decrypt()
327 		st1[3] = inv_mix_columns(inv_subshift(st0, 3)) ^ rkp[3];  in aesti_decrypt()
332 		st0[0] = inv_mix_columns(inv_subshift(st1, 0)) ^ rkp[4];  in aesti_decrypt()
333 		st0[1] = inv_mix_columns(inv_subshift(st1, 1)) ^ rkp[5];  in aesti_decrypt()
334 		st0[2] = inv_mix_columns(inv_subshift(st1, 2)) ^ rkp[6];  in aesti_decrypt()
335 		st0[3] = inv_mix_columns(inv_subshift(st1, 3)) ^ rkp[7];  in aesti_decrypt()
338 	put_unaligned_le32(inv_subshift(st1, 0) ^ rkp[4], out);  in aesti_decrypt()
339 	put_unaligned_le32(inv_subshift(st1, 1) ^ rkp[5], out + 4);  in aesti_decrypt()
340 	put_unaligned_le32(inv_subshift(st1, 2) ^ rkp[6], out + 8);  in aesti_decrypt()
341 	put_unaligned_le32(inv_subshift(st1, 3) ^ rkp[7], out + 12);  in aesti_decrypt()